AS14987: Rethem Hosting LLC
HoneyLabs honeypots recorded 22,288 probes from AS14987 (Rethem Hosting LLC) in the last 7 days, originating from 114 distinct source IP addresses.
First observed 2026-08-14 00:09:23, most recently 2026-08-20 16:06:25 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 8806 | 46 |
| 3389 | 44 |
| 1223 | 43 |
| 30564 | 42 |
| 66 | 42 |
| 165 | 41 |
| 30309 | 41 |
| 2621 | 40 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 104.152.52.125 | 638 | United States | |
| 104.152.52.200 | 599 | United States | |
| 104.152.52.207 | 355 | United States | |
| 104.152.52.206 | 353 | United States | |
| 104.152.52.201 | 349 | United States | |
| 104.152.52.205 | 349 | United States | |
| 104.152.52.211 | 348 | United States | |
| 104.152.52.100 | 345 | United States |
Where it comes from
| Country | Probes |
|---|---|
| United States | 22,288 |
Client strings it sends
| User agent | Probes |
|---|---|
| curl/7.61.1 | 4,214 |
| Microsoft WinRM Client | 3,027 |
ASN report
ASN report
Loading live data…